Why we're telling you this before you send anything
Most services will not spell this distinction out unprompted. We are telling you now, in plain terms, so you can decide with the full picture rather than finding out later.
Your documents are sealed
When you upload something, your browser locks it before it leaves your device, using a key held on that device and in your recovery code. We do not have a copy of that key. We cannot open your documents: not with a warrant, not by mistake, and not by anyone getting into our servers.
That also means something important about you: if you lose both your device and your recovery code, your documents cannot be recovered. Not by us, not by anyone. Please keep the recovery code somewhere you will still have it in a year.
The analysis made from them is not sealed
This is the part people are surprised by, so it is here rather than further down.
When you submit your case, the text of your documents is read by our analysis system, and the result it produces — a timeline, quotes it found, what it made of them — is stored in our own database in ordinary readable form. We can read that. It is what a lawyer reviews.
So the accurate summary is: we cannot open your files, and we can read what was worked out from them. Anyone telling you a legal service is "end-to-end encrypted" without that second half is telling you something that is not true.
Who else sees it
One law firm, after your case is prepared, and only after they have said they may look. Nobody else. Your documents themselves stay sealed until you hand them over, which is a separate thing you do deliberately.
Deleting things
You can delete a document, and deleting it destroys the sealed file. If you have already handed documents to a firm, their copy is theirs and is subject to their own obligations — deleting yours here does not reach it.
What we are
Worker Rights Line is not a law firm and cannot give you legal advice. Nothing on this site creates a relationship between you and a lawyer, and reading it is not the same as being advised.
Reviewed by Jelmer de Boer on 2026-08-19.
Based on: Architecture §0.1 and §7 (D2). Describes the system's actual behaviour. MUST be re-checked against the implementation at review, and again whenever the storage design changes.